Binance reports $6.3bn hack orchestrated via fake job interviews
Binance has confirmed that attackers gained access to its systems by targeting engineers through deceptive job recruitment processes, leading to a record-breaking $6.3bn cryptocurrency theft.
Binance, the world's largest cryptocurrency exchange, has disclosed that a security breach resulting in the theft of $6.3 billion was facilitated by a sophisticated social engineering campaign. According to the company's internal investigation, hackers initiated contact with Binance engineers through legitimate employment platforms, masquerading as recruiters to schedule fake job interviews. During the process, targets were persuaded to download malicious software disguised as legitimate interview assignments.
Once the malware was installed, attackers utilized compromised workstations and internal AI tools to expand their reach across the company’s network. This enabled them to seize control of crypto wallets and execute unauthorized transfers. The scale of the theft forced Binance to temporarily suspend global withdrawals, causing significant disruption for users.
While Pyongyang has denied allegations of involvement, both US law enforcement and cybersecurity analysts have linked the breach to North Korean state-sponsored actors, a finding Binance has since publicly acknowledged. To mitigate the financial impact, the firm stated that it has replenished 98% of the lost assets from its own reserves while continuing to work with federal agencies to track the stolen funds.